Route Origin Authorization

$ rpki-client -vvf rpkica.twnic.tw/rpki/TWNICCA/KKPC/8e7xOZOn7Pf0UTxMMRW6avEIMVU.roa
File:                     8e7xOZOn7Pf0UTxMMRW6avEIMVU.roa (raw, json)
Hash identifier:          EdZz8nqeyC1Gmtb8iM0sVHOycgBJsD24iO53ejlBXG8=
Subject key identifier:   F1:EE:F1:39:93:A7:EC:F7:F4:51:3C:4C:31:15:BA:6A:F1:08:31:55
Certificate issuer:       /CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
Certificate serial:       08FC
Authority key identifier: CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B
Authority info access:    rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer
Subject info access:      rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/8e7xOZOn7Pf0UTxMMRW6avEIMVU.roa
Signing time:             Tue 29 Sep 2020 10:04:43 +0000
ROA not before:           Tue 29 Sep 2020 10:04:43 +0000
ROA not after:            Wed 29 Sep 2021 09:51:23 +0000
asID:                     131645
IP address blocks:        2405:14c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2300 (0x8fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE37D7C99185A3D9AC611718DA78559B6E99A31B
        Validity
            Not Before: Sep 29 10:04:43 2020 GMT
            Not After : Sep 29 09:51:23 2021 GMT
        Subject: CN=F1EEF13993A7ECF7F4513C4C3115BA6AF1083155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:a2:23:00:eb:2d:d6:ed:7c:02:9e:68:dd:
                    a2:aa:88:d6:cc:d0:0e:0f:8a:6a:88:ad:46:e9:d8:
                    fb:09:f5:85:0b:f0:4f:a0:5c:4d:3f:33:df:4b:06:
                    47:ae:3d:b5:3e:30:83:9c:22:17:df:06:36:2f:f4:
                    d4:85:bb:52:0d:ea:d1:97:13:73:58:6e:d7:f0:88:
                    b1:b7:d0:c6:88:32:df:17:74:73:a2:14:6a:35:f5:
                    b1:4d:08:f4:79:e7:2f:5a:cf:03:88:9b:84:a7:9d:
                    58:85:ab:2e:63:96:f4:fa:e6:c2:7c:78:d0:40:7b:
                    d8:15:97:b4:f4:ff:ec:75:74:b4:29:84:a8:d0:0c:
                    25:bc:d5:77:6d:c0:e2:66:ab:d8:09:83:59:e7:c2:
                    0b:8d:40:6c:69:f9:af:31:0e:35:3e:35:27:83:c4:
                    73:d6:3e:66:cd:53:33:e3:78:19:1c:33:77:33:f5:
                    81:1b:e3:d9:95:48:de:86:a5:e8:a3:6c:b1:c4:a2:
                    63:31:7f:79:7a:da:f7:ed:dd:d9:49:1c:e7:e4:a3:
                    d0:94:1a:48:df:d7:74:1e:6a:50:12:fc:65:5a:1a:
                    07:00:5d:92:3f:a1:5b:ac:47:1a:09:2d:7e:24:17:
                    a3:f5:ba:6a:17:88:f2:1f:44:62:2b:41:87:b1:cd:
                    dd:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EE:F1:39:93:A7:EC:F7:F4:51:3C:4C:31:15:BA:6A:F1:08:31:55
            X509v3 Authority Key Identifier:
                keyid:CE:37:D7:C9:91:85:A3:D9:AC:61:17:18:DA:78:55:9B:6E:99:A3:1B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/zjfXyZGFo9msYRcY2nhVm26Zoxs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/zjfXyZGFo9msYRcY2nhVm26Zoxs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpkica.twnic.tw/rpki/TWNICCA/KKPC/8e7xOZOn7Pf0UTxMMRW6avEIMVU.roa
                RPKI Notify - URI:https://rrdp.twnic.tw/rrdp/notify.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:14c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:20:ea:43:a0:79:c8:3b:3e:05:58:25:4a:61:3e:10:fe:33:
         82:da:59:10:5c:28:0e:48:65:64:95:73:05:a1:5c:30:d0:81:
         ac:82:ca:6b:0d:6d:01:d8:4f:c0:c2:07:5b:b5:b8:61:fc:66:
         e0:0d:72:cf:f8:27:57:98:f4:4f:48:4c:a0:81:69:03:a5:aa:
         e2:63:b4:db:a9:aa:b6:f1:a5:3f:14:68:23:01:e7:89:e8:83:
         b4:52:d3:37:e7:13:10:01:30:cb:49:08:4b:aa:b4:5f:b1:d5:
         ac:2d:16:50:b1:48:c1:83:c3:7f:ca:3a:00:9c:1f:d0:32:d2:
         b4:55:95:b1:d0:ea:fa:56:10:40:84:29:60:39:b4:88:38:f6:
         a5:1b:a4:70:8b:31:52:57:aa:8a:00:88:40:65:71:95:a5:bc:
         cd:40:ca:ce:69:d4:6a:99:4a:c2:98:c2:46:cf:58:08:fe:ac:
         6a:11:6b:0f:39:f6:c1:69:75:ef:71:69:77:de:8b:7f:d3:01:
         c8:f9:8c:43:ff:b3:04:26:45:aa:23:8b:25:a2:8c:e2:dc:b3:
         8a:84:11:8f:b1:bb:3c:25:e0:dc:0e:e6:c6:18:21:1f:c5:0c:
         e4:e9:42:dd:19:85:01:29:b5:c2:cb:c0:b6:e8:41:c6:99:11:
         ca:a1:7b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----